Keeping Users In Check

Hi All,

I'm trying to find out if there is a way we can prevent users from creating/storing/copying/pasting files onto the root directory. This is because i want to prevent anything from writing itself there other than the system itself. Because most of the autorun viruses etc copies itself there. There are numerous viruses out there which does this. And at this present time, although majority of the anti-viruses can track them, we might never know if another way to circumvent anti-viruses watch and defenses can be formulated. This is the basis i'm looking for this specific way to block users from storing files on root drives. And yes i am aware that natively UAC does watch over these places which means without elevated privs, nothing can be stored there. But what good is security if the home owners welcome thieves in disguises?

Thank you for all inputs on this.

-Xyber.

Hi xyber, and welcome.

You control user activity via limiting user accounts and permissions. Here are some links that should help you get started. Lots of reading:

Good link:

http://technet.microsoft.com/en-us/library/dd835546(WS.10).aspx

Good also:

Configuring Windows 7 for a Limited User Account

And a good, basic well written tutorial:

Permissions - Allow or Deny Users and Groups

Some links specific to requirements you may have:

group policy - How can I prevent users from installing software? - Server Fault

Prevent users moving folders

And finally, some searches:

windows 7 prevent users from creating/storing/copying/pasting files onto the root directory - Google Search

windows 7 limiting user accounts - Google Search

http://www.google.com/search?q=windo...x=&startPage=1

And a final link, which is only applicable to The Professional and above versions of windows, but an excellent read about the use of GPedit:

http://www.thewindowsclub.com/tag/group-policy

James